Braindumps: Dumps for 70-294 Exam Brain Dump

Braindumps for "70-294" Exam

Microsoft Windows Server 2003 Active Directory Infrastructure

Question 1.
You work as the IT Admin at ABC.com. The ABC.com network has a forest that operates at the forest functional level of Windows Server 2003. The forest has a root domain named ABC.com, and two child domains named north.ABC.com and south.ABC.com. Each domain has a security group named Research which holds the user accounts for that domain. Two domain controllers are situated in each of these domains. One domain controller in each domain hosts a copy of the global catalog. The global catalog server in the ABC.com domain holds the domain naming and the schema master roles. The global catalog server in north.ABC.com and south.ABC.com holds the relative ID (RID), infrastructure, and PDC emulator master roles.

A ABC.com user named Ally Wagner, in the south.ABC.com domain, was recently married. When Ally Wagner got back, she asked you to change her surname in her user account. After changing Ally Wagner’s user account to Ally Hamm, you notice that her user account is still incorrectly specified as Ally Wagner in the Research group.

Which of the following master roles should you move to the domain controller that does not have the Global Catalog in each domain?

A. The domain naming master role.
B. The infrastructure master role.
C. The RID master role.
D. The schema master role.
E. The PDC emulator master role.

Answer: B

Explanation:
Problems like this can occur when the Infrastructure master role is on the same domain controller as the Global Catalog. The infrastructure master updates the group-to-user reference whenever group memberships change and replicates these changes across the domain. The infrastructure master compares its data with that of a global catalog. Global catalogs receive regular updates for objects in all domains through replication, so the global catalog data will always be up to date. If the infrastructure master finds that its data is out of date, it requests the updated data from a global catalog. The infrastructure master then replicates that updated data to the other domain controllers in the domain. Unless there is only one domain controller in the domain, the infrastructure master role should not be assigned to the domain controller that is hosting the global catalog. If the infrastructure master and global catalog are on the same domain controller, the infrastructure master will not function. The infrastructure master will never find data that is out of date, so it will never replicate any changes to the other domain controllers in the domain. Transferring the Infrastructure master role to a different computer would resolve this problem. There is no reason to transfer any other master roles.

Question 2.
DRAG DROP
You work as the IT Network Admin at ABC.com. The ABC.com network has a forest with two child domains named us.ABC.com and uk.ABC.com. All servers and domain controllers on the ABC.com network have Windows 2000 Server installed. You have been given the task to uABCrade the domain controllers in uk.ABC.com to Windows Server 2003. You therefore need to take the appropriate steps that are required to prepare the forest for the impending deployment.

Which of the following actions should you take?
Answer by selecting the appropriate steps from the column on the left and place it in the correct order in the column on the left.

Answer:

Question 3.
You work as the IT Admin at ABC.com. The ABC.com network has a domain named ABC.com. ABC.com has offices in London and Berlin, which are configured as separate sites. A Backup of ABC.com’s Ntds.dit file is performed outside of business hours, seven days a week. The domain has an OU named Research that currently holds no Active Directory objects. During the course of the business day an administrator in Berlin removes the Research OU, while an administrator in London simultaneously places existing Active Directory objects in it. The London administrator is later informed of the removal, and now realizes that the objects that were placed into the Research OU are missing.

The CIO has subsequently instructed you to make sure that a Research OU and the missing Active Directory objects are available to the London administrator. The CIO also informs you that your solution should have no impact on network connectivity and resources. You have already created a new OU, and named it Research.

Which of the following actions should you take NEXT?

A. You should transfer the objects from the LostAndFound container to the new Research OU
B. You should recreate the objects and then place the replicas in a Domain Group Policy that
should be linked to all OUs.
C. You should restore the objects to the new Research OU nonauthoritatively.
D. You should restore the objects to the new Research OU authoritatively.

Answer: A

Explanation:
You moved the objects to an OU that had just been deleted. When you move objects to an object that is no longer there, the objects get moved to the LostAndFound container. This means that we haven’t lost the objects, so we can just re-create the Research OU and move the users from the LostAndFound container to the new OU.

Reference:
Michael Cross, Jeffery A. Martin, Todda. Walls, Martin Grasdal, Debra Littlejohn Shinder & Dr. Thomas W. Shinder, MCSE: Exam 70-294: Planning, Implementing, and Maintaining a Windows Server 2003 Active Directory Infrastructure Study Guide & DVD Training System, Syngress Publishing, Rockland, MA, 2003, pp. 38-39, 99-101

Question 4.
You work as a IT Admin at ABC.com. ABC.com has its headquarters located in Dallas and branch division in Miami. The Dallas and Miami division represent separate sites. The Dallas and Miami divisions are linked to each other via a WAN link. You have added a domain controller named ABC-SR01 to the Miami division and configured it as a global catalog server. You have just completed configuring the site link between the Dallas and Miami divisions. The CIO at ABC.com has instructed you to make sure that Miami workstations authenticate to the network via ABC-SR01. The CIO also informs you that the replication of domain changes has to happen instantaneously.

Which of the following actions should you take?

A. You should reduce the site link interval.
B. You should reduce the site link cost.
C. You should combine the Dallas and Miami sites into a single site
D. You should increase the site link cost.

Answer: A

Explanation:

Question 5.
You work as the IT Admin at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2003 installed and all workstations have Windows XP Professional installed. ABC.com is made up of four divisions named Sales, Marketing, Finance and Research. The ABC.com network has an organizational unit (OU) named after each division that holds the user accounts of all employees working in that specific division. You need to install a new application for all employees in the Marketing division. You start by creating an installation package and a Group Policy object (GPO). You plan to make use of the new GPO to deploy the package to the workstations in the Marketing division. You therefore connect the GPO to the Marketing OU. However, the application does not install. The CIO informs you that the application must be installed and that you should make sure that marketing application is not installed on workstations in the other ABC.com divisions.

How will you accomplish the task?

A. Advise the Marketing users to reboot their workstations.
B. Edit the GPO and assign the application to user accounts with Marketing OU membership.
C. Connect the GPO to the ABC.com domain.
D. Connect the GPO to the OU that contains computer accounts and not the Marketing OU.

Answer: B

Explanation:
It is likely that the application was assigned to the computer accounts, rather than the user accounts.

Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam 70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, pp. 12-3 to 12-10, 12-13 to 12-28, 12-34 to 12-39

Question 6.
You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2003 installed and all workstations have Windows XP Professional installed. ABC.com has its headquarters in Chicago and a branch office in Dallas. Each office is configured as an Active Directory site, and the branch office is connected to the Chicago headquarters by a T1 connection. The Chicago headquarters contains two domain controllers named ABC-DC01 and ABC-DC02. The Dallas branch office also contains two domain controllers named ABC-DC03 and ABC-DC04. You plan to install a new server named ABC-DC05 in the Chicago office and a new server named ABC-DC06 in the Dallas branch office. ABC-DC05 and ABC-DC06 have much better hardware resources than the other domain controllers. Management wants the servers that have the best hardware resources to deal with Active Directory replication in each site.

Which of the following actions should you take?

A. Your best option would be to set ABC-DC02 and ABC-DC04 up as the preferred bridgehead
servers.
B. Your best option would be to set ABC-DC05 and ABC-DC06 up as the preferred bridgehead
servers in the domain.
C. Your best option would be to set ABC-DC05 and ABC-DC06 up as the preferred bridgehead
servers for RPC traffic.
D. Your best option would be to run the DCPROMO command on ABC-DC05 and ABC-DC06.

Answer: B

Explanation:
Directory information is replicated both within and among sites. Active Directory replicates information within a site more frequently than across sites. This balances the need for up-to-date directory information with the limitations imposed by available network bandwidth. You customize how Active Directory replicates information by using site links to specify how your sites are connected. Active Directory uses the information about how sites are connected to generate Connection objects that provide efficient replication and fault tolerance. Active Directory uses this information to determine which site link will be used to replicate information. Customizing replication schedules so replication occurs during specific times, such as when network traffic is low, will make replication more efficient. You can further control replication behavior by specifying a bridgehead server for inter-site replicated information. The bridgehead server is a specific server you want to dedicate for intersite replication, rather than using any server available. You can also establish a bridgehead server when your deployment uses proxy servers, such as for sending and receiving information through a firewall.

Question 7.
You work as the IT Admin at ABC.com. The ABC.com network has a domain named ABC.com with all servers installed with Windows Server 2003 and all workstations with Windows XP Professional. All the workstations’ computer accounts are placed in an organizational unit (OU) named ClientComputers. A new ABC.com security policy requires that users must be assigned local Power Users group membership and not local Administrators group membership on all workstations on the network.

This means that the security policy does not allow users to have administrative rights to domain controllers and member servers. In addition to this, it does not allow Power Users group membership to be modified in any way by members of the local Administrators group on workstations. You must implement a solution to comply with the requirements of the written security policy with group membership assignment occurring automatically.

Which of the following actions should you take?

A. Write a logon script that makes the Domain Users group a member of the local Power Users
group and link the logon script to the ClientComputers OU.
B. Set up a Group Policy object (GPO) that makes the Domain Users group a member of the
Local Power Users group and link the GPO to the ClientComputers OU.
C. Set up a Group Policy Object (GPO) that makes all users members of the Default Domain
Administrators group.
D. Make the written security policy the Default Domain Policy.

Answer: C

Explanation:
We need to move all users to the Power users group. We can do this by using the Restricted Groups option of a GPO to add the Domain Users group to the Power Users group. Restricted Groups ensures that group memberships are set as specified. Groups and users not specified in Restricted Groups are removed from the group. In addition, the reverse membership configuration option ensures that each restricted group is a member of only those groups specified in the Member Of column. This GPO must be linked to all client computers as users must not have any administrative rights to member servers or domain controllers in the domain. The client computers are in the ClientComputersOU.

Question 8.
You work as the IT Admin at ABC.com. The ABC.com network has a domain named ABC.com. All servers on the ABC.com network have Windows Server 2003 installed. ABC.com makes use of Group Policy objects (GPOs) to deploy applications to workstations. ABC.com employees in the Data Processing division can decide between two applications to view information based on the specific data formats and features they want. You must create a GPO to deploy either application depending on the selection made by the employee.

Which of the following is an action that you should take to achieve the above goals?

A. Configure the GPO to assign each of the applications to the workstations.
B. Configure the GPO to publish each of the applications without using file extension activation.
C. Create a transformation package to install each application on demand.
D. Configure two GPOs that each assigns an application.

Answer: B

Explanation:
You can publish applications to users, making the application available for users to install. To install a published application, users can use Add or Remove Programs in Control Panel, which includes a list of all published applications that are available for them to install.

Question 9.
You work as the IT Admin at ABC.com. The ABC.com network has a forest with a domain named ABC.com and two child domain named us.ABC.com and uk.ABC.com. All servers in the forest have Windows Server 2003 installed and the functional level of the forest is set at Windows Server 2003. All domains have Web servers and database servers that have computer accounts in the default Computers container in their specific domains. ABC.com wants the IT division, which is located at a central site, to administer the Web server computer accounts throughout the forest. Furthermore, the IT divisions in each domain must only administer the computer accounts of the database servers in their respective domains. You must delegate authority to the various IT divisions so that they can design a solution to meet the requirements. You start this task by designing the organizational unit (OU) solution that supports the requirements for the delegation of authority.

Which of the following actions should you take? (Choose two)

A. Configure a top-level OU for all Web server computer accounts under the ABC.com domain.
B. Configure a top-level OU for all database server computer accounts under the ABC.com
domain.
C. Configure a top-level OU for all Web server computer accounts under each domain.
D. Configure a top-level OU for all database server computer accounts under each domain.

Answer: C, D

Explanation:
The central operations department is responsible for administering the Web server computer accounts in all domains and there is a separate operations department for each domain that is responsible for administering the database server computer accounts in that domain. Therefore, we need two top-level OUs.

Question 10.
You work as the network administrator at ABC.com. The ABC.com network has a domain named ABC.com. ABC.com is made up of four divisions named Sales, Marketing, Finance and Research. The ABC.com network has an organizational unit (OU) named after each division that holds the user accounts of all employees working in that specific division. The workstations used by the Sales employees are contained in an organizational unit (OU) named SalesComputers. The SalesComputers OU belongs to the Sales OU.

You have recently deployed a new installation package for the application to all user accounts in the Sales OU. You have also generated a Group Policy object (GPO) that will deploy the installation package. You have to make sure that when an employee is shifted to another division, the application is uninstalled from that specific user’s workstation. When Mia Hamm is shifted from the Sales division to the Finance division a month later, you remove Mia Hamm from the Sales OU and include her in the Finance OU. The next morning you discover that Mia Hamm's workstation is still running the Sales applications although she was removed from the Sales OU.

Which of the following actions should you take? (Choose all that apply.)

A. Restore Mia Hamm's membership to the Sales OU.
B. Edit the GPO to ensure that the software installation package is removed.
C. Set up the software installation package to ensure automatic software uninstallation when Mia
Hamm’s user account is no longer a part of Sales OU.
D. Remove the client computer object for Mia Hamm’s computer from the SalesComputers OU.
E. Verify that Mia Hamm can log on to the ABC.com domain.
F. Remove Mia Hamm from the Sales global group.
G. Move Mia Hamm’s user account to the Finance OU again.

Answer: A, C, E, G

Explanation:
The Uninstall The Applications When They Fall Out Of The Scope Of Management option can be used to remove the application if it no longer applies to users or computers. However, the application must first apply to the user or computer. Therefore we should move Mia’s user account back into the Sales OU so that the application applies to her again and Mia must log on to the network for the GPO to apply. Then we can move Mia’s user account back into the Finance OU. The application will no longer apply to Mia and will be uninstalled.